Last updated 8 October 2026.
Privacy policy
Controller
Clawpy, a trading name of Kwok Shing Chan, Suite RA01, 195-197 Wood Street, London E17 3NU, United Kingdom. Contact: [email protected].
What we collect
- Account data: your email address and, if you connect GitHub, your GitHub account name and the repositories you select.
- Service data: capability lists, briefs you write, reports and verdict history.
- Billing data: handled by Paddle as merchant of record; we receive your subscription status, country and email, not your card details.
- Support emails you send us.
- Mailing lists, only if you join one: see Mailing lists below.
Source code handling is described separately on our code privacy page.
Why we use it
- To provide the service you signed up for (contract).
- To bill you and meet tax and accounting duties (contract and legal obligation).
- To keep the service secure and fix problems (legitimate interest).
- To send mailing-list emails you asked for (consent, which you can withdraw at any time).
We do not sell personal data and do not use it for advertising.
Who processes it
| Processor | Purpose | Location |
|---|---|---|
| Hostinger | Server hosting | EU |
| Cloudflare | Website, network protection, encrypted backups (R2) | Global |
| Mistral AI | AI analysis of capability summaries (no source code, training off) | EU |
| Resend | Sending report and login emails | EU |
| Paddle | Payments, invoicing and tax, as merchant of record | UK and EU |
| GitHub | Repository access, if you connect it | USA |
| Namecheap Private Email | Support mailbox | UK |
| AWeber | Mailing lists, only if you join one | USA |
Transfers outside the UK and EU rely on the provider's standard contractual clauses or equivalent safeguards.
Mailing lists
If you join a Clawpy mailing list, AWeber keeps your email address for us, with when and how you signed up and confirmed, and which of our emails you open or click. Nothing is sent until you click the link in our confirmation email. Every email has an unsubscribe link, or you can email [email protected]. After you leave, we keep only what is needed to make sure we do not email you again. Mailing lists are separate from your Repoclaw account: joining one does not create an account, and leaving one does not affect it.
How long we keep it
Account and service data: while your account is open, then deleted within 35 days, including backups. Billing records: as long as tax law requires, normally six years.
Your rights
You can ask to access, correct, export or delete your data, or object to processing, by emailing [email protected]. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Cookies
This website uses no tracking cookies. The dashboard uses one essential cookie to keep you signed in.